Trust Nothing: Tips to Secure AI Tools and Agents

This is a guidance document on securing AI agents and treating them as Non-Human Identities (NHIs); it recommends a zero-trust approach (least privilege, short-lived tokens, task separation), defenses against prompt injection (human or security-trained AI review, AI proxy tools), encrypted communications, microsegmentation, and employee education and policies to mitigate evolving AI-related risks.